Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0b05137-1066-46d9-8f2f-f8752c9adb48.roa
File: b0b05137-1066-46d9-8f2f-f8752c9adb48.roa (raw, json)
Hash identifier: yHDXbruQ4/6r/pv0CIAkBT3sa8/iVVTqZfIbPoGun/w=
Subject key identifier: D8:6A:FA:07:A5:D4:F0:5C:07:80:31:48:C6:4A:B7:3A:37:73:B8:85
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1DCBD13ADCCEA36BE832646FBA272D935F580A48
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0b05137-1066-46d9-8f2f-f8752c9adb48.roa
Signing time: Tue 11 Mar 2025 00:01:52 +0000
ROA not before: Tue 11 Mar 2025 00:01:52 +0000
ROA not after: Tue 15 Apr 2025 23:59:59 +0000
asID: 22394
IP address blocks: 139.56.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:cb:d1:3a:dc:ce:a3:6b:e8:32:64:6f:ba:27:2d:93:5f:58:0a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 11 00:01:52 2025 GMT
Not After : Apr 15 23:59:59 2025 GMT
Subject: serialNumber=e8c6a17a17d0d56e444aa7e09463dc3a457e3cc5c6c6e925ea1b32c5905542fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c7:2a:5c:61:53:44:11:a9:e0:e4:61:be:6d:
de:32:12:15:55:e3:67:2f:70:f2:4e:19:89:91:14:
0d:f7:4f:08:b0:0e:59:9d:88:19:90:20:71:7d:c8:
4d:ce:43:31:43:2f:80:34:5d:6d:10:82:18:8a:06:
57:c2:65:c4:99:f1:d0:4a:37:70:e5:90:5d:69:33:
05:88:23:14:29:db:c0:ee:ce:ca:33:90:1a:29:f1:
e9:a4:b3:1a:9a:52:c1:e5:e5:49:5d:e1:a7:49:52:
a3:0f:01:35:83:c7:bd:ef:38:d5:47:b5:c9:a7:32:
5f:7d:34:8a:1b:e6:89:22:52:93:dc:7c:6e:5c:91:
16:f7:bf:fb:0c:0d:3d:3c:a4:8f:9d:e9:aa:14:6e:
bf:8f:3d:d0:0d:19:e5:bd:f4:51:d4:6b:9f:c9:b4:
d1:43:96:ca:14:85:f9:d7:83:31:72:57:d6:eb:2f:
5c:52:6f:0b:fe:52:d6:25:8c:78:29:4a:ac:f4:3a:
1a:0b:31:83:18:60:d2:e0:36:b0:e9:c7:82:4a:13:
b9:8d:d4:03:c7:b6:5c:33:34:c8:3a:50:0e:2e:69:
21:d2:13:61:90:1a:c7:8e:1f:a7:51:91:f7:56:ad:
52:e1:74:58:51:f6:a5:66:f3:9c:d9:69:a1:d9:cb:
d0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6A:FA:07:A5:D4:F0:5C:07:80:31:48:C6:4A:B7:3A:37:73:B8:85
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0b05137-1066-46d9-8f2f-f8752c9adb48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.56.1.0/24
Signature Algorithm: sha256WithRSAEncryption
29:de:40:a0:ea:19:cd:bf:21:a7:48:a4:c7:74:46:13:b5:5e:
36:8b:fd:d3:22:e9:c8:68:11:1e:52:a0:91:69:9d:3c:ef:f3:
53:94:a3:1e:12:6c:c3:c8:8b:65:2e:07:cf:ab:2e:ef:03:0a:
be:2b:5f:1b:6f:14:b6:50:df:d8:6f:9a:5e:39:34:2c:98:f1:
bf:03:ef:84:b6:93:2b:38:c9:8a:22:40:34:9e:5c:2a:17:5e:
ea:98:32:e2:f7:fb:a7:f2:e4:5d:92:27:03:df:f4:1a:7d:62:
a1:c9:1e:70:0c:3c:8a:af:09:65:b3:d1:ff:a0:aa:99:44:05:
f1:a6:a3:34:56:25:bb:93:32:c4:4d:bb:d3:6a:c4:8a:59:b0:
db:68:70:da:42:85:0c:22:fb:a0:b7:97:eb:e3:3f:8f:83:3d:
c6:2a:30:9a:eb:82:a5:bd:76:d1:aa:f1:98:87:6a:da:d9:98:
cf:a4:ca:42:4b:1b:19:ac:1e:a8:8d:22:b7:46:14:6b:24:ab:
20:33:29:3c:13:35:37:4d:70:04:09:f6:30:3e:2b:eb:ef:04:
67:7c:2d:23:16:88:f4:02:bc:37:54:0a:d2:41:cb:aa:e3:e1:
f5:ad:9d:60:24:39:5b:55:f5:df:b2:13:cf:42:be:83:db:7b:
60:87:0c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:06 2025 by rpki-client